Kuniaki Shimizu kun432

例えば、sshで10022を追加したい

$ cp /usr/lib/firewalld/services/ssh.xml /etc/firewalld/services/ssh-10022.xml
$ vi /etc/firewalld/services/ssh-10022.xml

<?xml version="1.0" encoding="utf-8"?>

変更前

# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

構成

master x 1, worker x2の構成 eth0がサービス用、wlan0を管理用に使う

k8s-master
- eth0: 192.168.100.21/24
- wlan0: 192.168.200.21/24
k8s-worker1
- eth0: 192.168.100.31/24

$  aws ssm get-parameters-by-path --path "/hosts" --region ap-northeast-1
{
    "Parameters": [
        {
            "Name": "/hosts/sample-1",
            "DataType": "text",
            "LastModifiedDate": 1637029822.924,
            "Value": "111.111.111.111\n222.222.222.221\n222.222.222.223",
            "Version": 2,

epelにパッケージはもうないので、直接。

$ rpm -Uvh https://rpmfind.net/linux/dag/redhat/el7/en/x86_64/dag/RPMS/denyhosts-2.6-5.el7.rf.noarch.rpm

設定ファイルはこれだけ。

$ tree /etc/denyhosts

	function createTairetsu() {
	var ss = SpreadsheetApp.getActiveSpreadsheet();
	var sheet = ss.getSheets()[0];
	sheet.insertColumnBefore(14);
	sheet.insertColumnBefore(16);
	sheet.getRange('N1').activate();
	sheet.getCurrentCell().setValue('前走:3コーナー推定隊列');
	sheet.getRange('N2').activate();
	sheet.getCurrentCell().setFormula('=IFERROR(CONCATENATE(REPT("　",M2-1),CHAR(M2+CODE("①")-1),REPT("　",18-M2)),REPT("―",18))');
	sheet.getActiveRange().autoFill(sheet.getRange(2,14,ss.getLastRow() - 1, 1), SpreadsheetApp.AutoFillSeries.DEFAULT_SERIES);

	{
	"agent": {
	"metrics_collection_interval": 60,
	"run_as_user": "root"
	},
	"metrics": {
	"append_dimensions": {
	"AutoScalingGroupName": "${aws:AutoScalingGroupName}",
	"ImageId": "${aws:ImageId}",
	"InstanceId": "${aws:InstanceId}",

	'use strict';

	const line = require('@line/bot-sdk');
	const express = require('express');
	const Axios = require("axios");

	// create LINE SDK config from env variables
	const config = {
	channelAccessToken: process.env.LINE_CHANNEL_ACCESS_TOKEN,
	channelSecret: process.env.LINE_CHANNEL_SECRET,

	const axios = require("axios");
	const { cli } = require("cli-ux");

	const API_KEY = "YOUR_API_KEY_HERE";
	const VERSION_ID = "YOUR_VERSION_ID_HERE";

	async function interact(userID, request) {
	console.log("...");

	const response = await axios({

	# $OpenBSD: sshd_config,v 1.100 2016/08/15 12:32:04 naddy Exp $

	# This is the sshd server system-wide configuration file. See
	# sshd_config(5) for more information.

	# This sshd was compiled with PATH=/usr/local/bin:/usr/bin

	# The strategy used for options in the default sshd_config shipped with
	# OpenSSH is to specify options with their default value where
	# possible, but leave them commented. Uncommented options override the